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(57) A mobile station (1 0) and wireless system (32) 
operates in accordance with a method that has steps of: 
(A) during the operation of the mobile station, determin- 
ing and storing a set (24A) of performance-related data 
(PRCs) in the mobile station; and (B) responsive to an 
occun-ence of a triggering event, transmitting the set or 
a sub-set of the PRCs to a computer (33A) for analysis. 
The PRCs can be stored in physical counters and reg- 
isters or in memory locations that are managed to func- 
tion as counters and registers. The PRCs can include a 
count of dropped calls, and/or an indication of a result 
of a mobile station self-test mode of operation. The trig- 
gering event can be a receipt by the mobile station of a 
message to transmit the set or sub-set of the perform- 
ance-related data, or a receipt by the mobile station of 
an input from a user of the mobile station, or an expira- 
tion of a timer, or at least one of the PRCs being equal 
to a threshold value. The step of transmitting the set or 
a sub-set of the PRCs can include steps of receiving the 
transmitted PRCs at a control center (33) associated 
with a network sen^ice provider and/or at a (remote) di- 
agnostic center (38); and then analyzing the data with 
the computer (33A) to determine an indication of an oc- 
currence of at least one of a fault in the mobile station, 
a fault in a system of the network service provider, or a 
no fault condition. An optional step transmits the deter- 
mined indication to the mobile station. The analysis may 
further include determining statistical information re- 
garding a population of mobile stations. For the case 
where the triggering event is the reception of a wireless 



message, the message may be in the form of an en- 
crypted message to transmit the set or sub-set of the 
performance-related data. In this case the mobile sta- 
tion operates to decrypt the received message using an 
associated public key stored in the mobile station and 
to transmit the set or the sub-set of the performance- 
related data only in response to correctly decrypting the 
encrypted message. 
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Description 

[0001] This invention relates generally to radiotele- 
phones and, in particular, to radiotelephones or mobile 
stations, such as those capable of operation with a cel- 
lular network, and that are further capable of executing 
a self-test and other diagnostic procedures and record- 
ing the results. 

[0002] A persistent problem in the mobile station mar- 
ket has been the occurrence of a so-called No Fault 
Found (NFF) indication after a user or subscriber returns 
a purportedly nonfunctioning or malfunctioning mobile 
station to a dealer or to a network service provider. For 
example, the subscriber may report that the mobile sta- 
tion exhibits a particular problem or failure mode; how- 
ever, a technician at a repair depot or center is unable 
to find any type of malfunction or problem with the re- 
turned mobile station, and must issue a NFF report. In 
a typical case the problem experienced by the subscrib- 
er may actually be the result of some temporary problem 
experienced by the wireless network itself, and not by 
the mobile station. For example, some network problem 
may cause the mobile station to repeatedly drop calls, 
or to be unable to obtain service. 
[0003] It will be appreciated that this type of problem 
can be costly for the dealer and/or service provider, as 
well as for the manufacturer. In addition, the user may 
develop an unfavorable impression of the manufacturer 
of the mobile station, even though the problem experi- 
enced by the user lies totally outside the control of the 
manufacturer. 

[0004] It is thus a first object and advantage of this 
invention to provide an improved radiotelephone and 
semce provider interaction that overcomes the forego- 
ing and other problems. 

[0005] It is another object and advantage of this in- 
vention to provide a mobile station that stores and main- 
tains a plurality of Product Performance Counters 
(PPCs) that are indicative of the electrical and opera- 
tional state of the mobile station. 
[0006] It is a further object and advantage of this in- 
vention to provide a mobile station that stores and main- 
tains a set of PPCs, and that is further able to transmit 
the complete set or a subset of the PPCs to an external 
location for analysis. 

[0007] It is one further object and advantage of this 
invention to provide a computer at a location external to 
the mobile station, the computer being capable of ana- 
lyzing the PPCs, as well as other data inputs, to deter- 
mine a fault status of the mobile station and/or wireless 
network. 

[0008] It is another object and advantage of this in- 
vention to provide a mobile station that stores and main- 
tains a set of PPCs and that operates, in response to 
receiving an encrypted PPC request message, for trans- 
mitting the complete set or a subset of the PPCs to an 
external location. 

[0009] The foregoing and other problems are over- 



come and the objects and advantages are realized by 
methods and apparatus in accordance with embodi- 
ments of this invention. 

[0010] Disclosed herein is a method for operating a 
5 mobile station, as well as a mobile station and wireless 
system that operates in accordance with the method. 
The method has steps of: (A) during the operation of the 
mobile station, determining and storing a set of perform- 
ance-related data (PPCs) in the mobile station; and (B) 
10 responsive to an occurrence of a triggering event, trans- 
mitting the set or a sub-set of the performance-related 
data to a computer for analysis. The performance-relat- 
ed data can be stored in counters and registers, or in 
memory locations that are managed so as to function 

15. as counters and registers. By example, the perform- 
ance-related data can include a count of dropped calls, 
and/or an indication of a result of a mobile station self- 
test mode of operation. The triggering event can be a 
receipt by the mobile station of a message to transmit 

20 the set or sub-set of the performance-related data, or a 
receipt by the mobile station of an input from a user of 
the mobile station, or an expiration of a timer, or at least 
one of the performance-related data being equal to a 
threshold value (e.g., the number of dropped calls 

25 reaches some threshold value.) 

[0011] In the presently prefen-ed embodiment of this 
invention the triggering event message that is received 
by the mobile station is transmitted to the mobile station 
in an encrypted format, such as in an RSA format. In 

30 this embodiment the mobile station stores a public key 
for decrypting the received message, and responds to 
the message by transmitting the set or sub-set of the 
PPC data in an encrypted or in an unencrypted format 
to the network 

35 [0012] The step of transmitting the set or a sub-set of 
the performance-related data can Include steps of re- 
ceiving the transmitted set or sub-set of the perform- 
ance-related data at a control center associated with a 
networi< service provider and/or at a (remote) diagnostic 

40 center, or at a local computer; and then analyzing the 
data with the computer to determine an indication of an 
occurrence of at least one of a fault in the mobile station, 
a feult in a system of the network service provider, or a 
no fault condition. An optional step transmits the deter- 

'5 mined indication to the mobile station. The analysis may 
further include determining statistical information re- 
garding a population of mobile stations. 
[0013] The step of analyzing the performance-related 
data may be performed in combination with at least one 

>o of wireless networic performance data or infomiation ob- 
tained from a user of the mobile station. 
[0014] The public key stored in the mobile station may 
be one of a set of public keys stored In the mobile station: 
wherein individual members of the set of public keys are 

'5 associated with applications executable by the mobile 
station in cooperation with at least one of an encrypted 
command and an encrypted data set received fi-om the 
wireless network. The encrypted command and/or data 



3 

set are decrypted by the mobile station using one of the 
set of public keys. 

[0015] The above set forth and other fieatures of the 
invention are made more apparent in the ensuing De- 
tailed Description of the Invention when read in conjunc- 
tion with the attached Drawings, wherein: 

Fig. 1 is a block diagram of a mobile station that is 
suitable for practicing this invention; 

Fig. 2 is an elevational view of the mobile station 
shown in Fig. 1 , and which further illustrates a wire- 
less communication system and a service provider 
to which the mobile station is bidirectionally coupled 
through wireless RF links; 

Fig. 3 is a diagram depicting the inputs and outputs 
of a software module that analyses PRCs and other 
information, and which provides outputs indicative 
of the operational state of the mobile station; 

Fig. 4 is a logic flow diagram in accordance with a 
method of this invention; 

Fig. 5 is a system level diagram showing an over 
the air activation (OTA) system In accordance with 
an aspect of these teachings; and 

Fig. 6 is a logic flow diagram of a PRC retrieval 
method in accordance with these teachings. 

[0016] Reference is first made to Figs. 1 and 2 for il- 
lustrating a radiotelephone, also refered to herein as a 
wireless mobile station 10. that is suitable for practicing 
this invention. The mobile station 10 may be. but is not 
limited to, a cellular telephone or a personal communi- 
cator The mobile station 10 includes an antenna 1 2 for 
transmitting signals to and for receiving signals from a 
base site or base station 30. The base station 30 can 
be a part of a cellular network comprising a wireless net- 
work provider system 32, also referred to herein for sim- 
plicity as a wireless networt^ 32, that further includes a 
mobile switching center (MSG) 34. The MSG 34 pro- 
vides a connection to landline trunks when the mobile 
station 1 0 is involved in a call. A network control center 
33 may also be provided, the networi< control center 33 
being coupled to the MSG 34 for controlling the opera- 
tion of the network provider system 32, as well as for 
receiving information from the mobile station 10 via the 
base station 30. The networit control center 33 could be 
connected at one or more other points within the net- 
work provider system 32. 

[0017] The mobile station includes a modulator 
(MOD) 14A, a transmitter 14, a receiver 16, a demodu- 
lator (DEMOD) 16A, and a controller 18 that provides 
signals to and receives signals from the transmitter 14 
and receiver 16, respectively. These signals include sig- 
nalling information in accordance with the air interface 
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standard of the applicable cellular system, and also user 
speech and/or user generated data. The particular type 
of air interlace standard is not important to the operation 
of this Invention, as the teachings of this invention apply 

5 to analog wireless systems (e.g., AMPS systems), as 
well as digital systems, including time division/multiple 
access (TDMA) and code division/multiple access (CD- 
MA) systems. As an example, both conventional and ad- 
vanced GSM-type systems can benefit form the teach- 
to ings of this invention. 

[0018] It is understood that the controller 18 also in- 
cludes the circuitry required for implementing the audio 
(speech path) and logic functions of the mobile station. 
By example, the controller 18 may be comprised of a 

15 digital signal processor device, a microprocessor de- 
vice, and various analog to digital converters, digital to 
analog converters, and other support circuits. The con- 
trol and signal processing functions of the mobile station 
are allocated between these devices according to their 

20 respective capabilities. 

[0019] A user interface includes a conventional ear- 
phone or speaker 17, a conventional microphone 19, a 
display 20, and a user input device, typically a keypad 
22, all of which are coupled to the controller 1 8. The key- 

25 pad 22 Includes the conventional numeric (0-9) and re- 
lated keys (#,*) 22a, and other keys 22b used for oper- 
ating the mobile station 10. These other keys 22b may 
include, by example, a SEND key, various menu scroll- 
ing and soft keys, and a RWR key. 

30 [0020] The mobile station 1 0 also includes a remova- 
ble battery 26 for powering the various circuits that are 
required to operate the mobile station. 
[0021] The mobile station 10 also includes various 
memories, shown collectively as the memory 24, where- 

35 in are stored a plurality of constants and variables that 
are used by the controller 1 8 during the operation of the 
mobile station. For example, the memory 24 stores the 
values of wireless system parameters and the number 
assignment module (NAM). An operating program for 

40 controlling the operation of controller 18 is also stored 
In the memory 24 (typically in a ROM device). The op- 
erating program in the memory 24 may include routines 
to present messages and message-related functions to 
the user on the display 20, typically as various menu 

45 items. The memory 24 also includes routines for imple- 
menting the mobile station executed methods described 
below. 

[0022] In accordance with an aspect of this Invention, 
the memory 24 stores a set of Product Rerfomiance 

50 Counters (PRCs) 24A, individual ones of which are in- 
dicative of some aspect of the operation of the mobile 
station 10. In general, individual ones of the PRCs 24A 
could be true counters, such as one to record a number 
of dropped calls, while others may be considered more 

55 asregistersforstoringsomevaiuesuchas, byexample, 
the magnitude of the received signal strength (RSS) at 
a time that a particular call is dropped. When stored in 
the memory locations of the memory 24, it can be ap- 
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predated that software employs the memory locations 
to emulate the function of counters and registers (e.g., 
by incrementing a particular memory location every time 
a dropped call occurs.) 

[0023] In general, the PRCs 24A provide information 
regarding the wireless network quality, as well as infor- 
mation regarding the operation of the mobile station 1 0. 
In accordance with a further aspect of the invention, the 
set of PRCs 24A, or a subset thereof, are transmitted 
from the mobile station to the network provider system 
32, via a base station 30. The PRCs 24A can be trans- 
mitted in response to a request received from the net- 
work provider system 32 or from some other requestor, 
or on command from a user of the mobile station 10, or 
periodically at some predetermined interval of time, or 
upon an occurrence of some other triggering event (e. 
g., reaching a predetermined threshold number of 
dropped calls within some predetermined interval of op- 
erating time.) 

[0024] The use of the PRCs 24A can be especially ad- 
vantageous when characterizing new wireless specifi- 
cation features and new network application services, 
such as when a test group or population of mobile sta- 
tions are deployed in the coverage area of the network 
provider system 32. By using a test group of mobile sta- 
tions the sen/ice provider is enabled to collect the PRCs 
24A over the air and thereby characterize coverage and 
other characteristics of interest. Feedback can also be 
given to the user's of the mobile stations 10, either by 
transmissions from the network provider for display on 
the display 20, and/or by other means, such as posting 
the results on a web page that can be accessed either 
through a conventional PC or wirelessly by the mobile 
stations 1 0. 

[0025] During a call the set or a selected subset of the 
PRCs 24A can be transferred by the controller 18 via 
the transmitter 14 using, for example, a Short Message 
Service (SMS) feature, or by some other message-re- 
lated feature, such as the Unstructured Supplementary 
Data Sendee feature of GSM. or as packet data, such 
as packet data conforming to the TCP/IP format sent 
over the internet 37. It is also within the scope of this 
invention to display on the display 20 the PRCs 24A to 
be transmitted, and then have the user speak the results 
to a human or machine (voice recognition) operator at 
the network control center 33. The PRCs 24A can be 
analyzed at the network control center 33 and/or at a 
remote diagnostic center 38 that is coupled to the net- 
work provider system 32 through conventional phone 
lines (e.g., the Public Switched Telephone Network 
(PSTN) 36) or through a separate communications net- 
work. A connection to the internet 37 can be used for 
this purpose as well. The remote diagnostic center 38 
may be located at the manufacturer of the mobile station 
10, or at a sales or service center, or at a research and 
development center, or at any convenient or desirable 
location. 

[0026] Referring now also to Fig.3, the network con- 
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trol center 33 may include a failure analysis module 
(FAM) 33A such as software running on a PC or main- 
frame computer. The FAM 33A receives as inputs the 
set or subset of the transmitted PRCs 24A, as well as 
5 mobile station self-test results if not a part of the PRCs 
24A, an input from the network operator, such as infor- 
mation obtained from the user of the mobile station 10, 
as well as certain network parameters, such as base 
station power Other inputs could be provided as well, 
^0 such as RF propagation conditions in the service area 
of the network provider system 32. The FAM 33A proc- 
esses these inputs using, for example, an expert system 
or a neural network, and outputs appropriate indications 
of mobile station/network functionality. These indica- 

15 tions can include an indication of a failure of the mobile 
station 10, an indication of a failure of the network pro- 
vider system 32, or a no fault found (NFF) indication. It 
is within the scope of the teaching of this invention to 
relay the output indication of the FAM 33A back to the 

20 mobile station 1 0, thereby providing the user with a real 
time or substantially real time failure analysis and fault 
detection. By example, the user may be informed in a 
closed-loop manner that based on the PRCs 24A previ- 
ously transmitted, as well as on information obtained 

25 from the network operator, that the mobile station 10 Is 
most likely fully functional (implying that either no fault 
exists or that the fault lies elsewhere, such as in the net- 
work provider system 32), or that the mobile station 10 
is most likely experiencing some malfunction. In this lat- 

30 ter case the user may bring the mobile station 10 to a 
local service center or to a dealer for an exchange or for 
repairs. However, it can be appreciated that in this latter 
case it has already been established that the mobile sta- 
tion 10 is most likely malfunctioning, thereby eliminating 

35 or significantly reducing the occurrence of the No Fault 
Found (NFF) situation discussed previously. 
[0027] The set of PRCs 24A can Include a number of 
different indications of mobile station functionality in- 
cluding, in addition to a number of dropped calls and/or 

40 unsuccessful call origination attempts (as well as signal 
strength indications), other indications such as the result 
of internal self-test programs (e.g., memory errors, ab- 
normal program conditions and terminations, etc.), and 
also data collected periodically during periods of appar- 

45 ent normal operation. This latter indication is useful in 
establishing a baseline against which other indications 
can be compared. The PRCs 24A can also include indi- 
cations of frame error rates, symbol error rates, a 
number of requests for re-transmission that occur during 

50 some interval of time, etc. 

[0028] Referring to the method depicted in Fig. 4, at 
Step A the mobile station 1 0 stores the set of PRCs 24A. 
This step may occur over a considerable period of time 
during the operation of the mobile station 10. At Step B 

55 a determination is made if some triggering event has oc- 
curred. The triggering event could be, for example, the 
receipt of a message requesting the mobile station 10 
to transmit the set or subset of PRCs 24A, or an input 
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from the user of the mobile station 10, or the expiration 
of a timer. If the triggering event has not occunred, con- 
trol passes back to Step A to continue storing and/or 
updating the set of PRCs 24A. If the triggering event has 
occun-ed, then the set or the subset of PPCs 24A are 
transmitted from the mobile station 10 to the networic 
provider system 32. via the base station 30. It is within 
the scope of this invention to selectively transmit the 
PPCs 24A, such as by transmitting only requested 
PPCs 24A (e.g., requested in a message transmitted to 
the mobile station 10), or by transmitting only a subset 
of the PPCs 24A to the network control center 33, while 
transmitting the complete set of PPCs 24A to the remote 
diagnostic center 38. The transmitted PPCs 24A may 
be encrypted prior to transmission, and subsequently 
decrypted at the receiving location, thereby assuring pri- 
vacy of the transmitted PPC information. 
[0029] In a presently prefen-ed embodiment of this in- 
vention the triggering event message received from the 
wireless network 32 is encrypted, as discussed in further 
detail below, and is decrypted by the mobile station 10 
after receipt. The PPC response data may or may not 
be encrypted by the mobile station 10 before transmit- 
ting same back towards the wireless networic 32. 
[0030] In any event, at Step C the FAM 33A, or an 
equivalent system at the remote diagnostic center 38, 
analyses the PPCs 24A, preferably along with the other 
information discussed above, such as network related 
infonnation and/or information obtained by an operator 
from the user of the mobile station 10. At Step D a de- 
termination is made as to whether the PPCs 24A (and 
optional other information) indicate a mobile station 
fault. If yes, control passes to Step G, while if a mobile 
station fault is not indicated, a determination is made at 
Step E if a networic ^ult is indicated. If yes, control pass- 
es to Step G, while if a network malfunction is not indi- 
cated, a determination is made at Step F that no ^ilure 
or fault is found (NFF). Control then passes to Step G 
where a message maybe fomnatted and sent to the mo- 
bile station 10 to indicate to the user the outcome of the 
PPC analysis. 

[0031] Although described in the context of preferred 
embodiments, it should be realized that a number of 
modifications to these teachings may occur to one 
skilled in the art. By example, it can be appreciated that 
different types of mobile stations 10 may store different 
types of PPCs 24A. For example, a TDMA mobile sta- 
tion 1 0 may store one or more PPCs that relate to frame 
and time slot synchronization functions, while a CDMA 
mobile station may store one or more PPCs that relate 
to pseudonoise (PN) spreading code conrelation func- 
tions. 

[0032] It should be further realized that the PPCs 24A 
can be employed by the network operator and/or by the 
manufacturer of the mobile station to obtain statistical 
data relating to the operation of a population of mobile 
stations 10. For example, statistical information relating 
to a number of dropped calls within a certain geograph- 
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ical area (e.g., within a predetermined set of adjacent 
ceils), as a function of received signal strength at the 
time the calls are dropped, as well as (optionally) the 
frame error rates being experienced, can be gathered 
5 and analyzed by mobile phone type (e.g., the operation 
of a newer model mobile station can be contrasted to 
the operation of an older model mobile station.) 
[0033] Furthemrtore. this example can be expanded 
to cover as well the determination of fault location. By 
10 example, if the PPC data 24A indicates that the mobile 
station 10 has dropped three calls in the past ten min- 
utes, and if associated signal strength indications show 
an adequate amount of signal strength, then the FAM 
33A may determine that a fault may lie in the mobile s\a- 
15 tion 10. However, if a plurality of mobile stations are 
found to be dropping calls, and if most of these are de- 
temnined from the PPC data 24A or from the networic- 
related parameter data to be located in the same cell, 
then a fault may lie instead in the base station 30, and 
not in the mobile stations 10. This is especially true if 
mobile station self-test results do not indicate a mobile 
station malfunction. 

[0034] As another example, if the PPC data 24A indi- 
cates that the mobile station 10 is dropping calls, and if 
the associated signal strength indications do not show 
an adequate amount of signal strength (weak received 
signal), then the FAM 33A may still indicate that fault is 
most likely to be in the mobile station 10. if the mobile 
station self-test results indicate some mobile station 
malfunction. 

[0035] Alternatively, if the PPC data 24A indicates that 
the mobile station 10 is dropping calls, and if the asso- 
ciated signal strength indications indicate a weak field 
strength (weak received signal), but rf the mobile station 
self-test results does not indicate a mobile station mal- 
function, then the fault may be indicated as being most 
probably in the networi< provider system 32. 
[0036] Alternatively, if the PPC data 24A indicates that 
the mobile station 10 is dropping calls, and if the asso- 
ciated signal strength indications indicate adequate or 
good field strength readings, and if the mobile station 
self-test results does not indicate a mobile station mal- 
function, then the fault may again be indicated as being 
most probably in the network provider system 32 (for 
example, the networic may be too heavily loaded, or 
some networi< electronic unit is marginal or intermittent .) 
[0037] It should also be realized that certain steps of 
the method shown in Fig. 4 can be executed in other 
than the order shown, and additional steps can be add- 
ed, while still obtaining the desired result. For example, 
the order of execution of Steps D and E could be re- 
versed, and the Step G could be bypassed either entire- 
ly or selectively (e.g., the user is notified only when the 
fault is determined to lie in the mobile station 10.) 
[0038] It should further be noted that it is not neces- 
sary that the PPCs 24A be output from the mobile station 
1 0 only by being transmitted through the wireless trans- 
mitter 14. For example, and referring again to Fig. 1, a 
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mobile station data interface 28 can be used to transmit 
or output the PRCs 24A through a cable or an IR link to 
a local computer 29 (shown in Fig. 2) that has a suitable 
diagnostic program, similar or identical to the program 
that operates in the Network Control Center 33 or the 
Remote Diagnostic Center 38. In this case the local 
computer 29 could be installed at a point of sale location 
or a service center, or at any other convenient location, 
and IS enabled to provide rapid feedback to the user as 
to a possible source of a problem being experienced by 
the user. Also in this case the triggering event that caus- 
es the controller 18 to transmit the PRCs 24A can be a 
receipt by the controller 18, through the data Interface 
28, of an inten'ogation signal sent from the local compu- 
ter 29. 

[0039] As was mentioned briefly above, it is within the 
scope of these teachings to require that the wireless net- 
work 32 encrypt or "sign" the PPC request message pri- 
or to transmitting the message to the mobile station 1 0. 
In this manner the structure of the PPC request mes- 
sage is not readily determinable by third parties, and 
thus it becomes less likely that the mobile station 10 
would respond to a PPC request message sent from 
other than an authorized source of PPC request mes- 
sages. This can be important If the mobile station 10 re- 
sponds to the requestor using, for example, an SMS 
message, where the mobile station user would be 
charged a fee for sending the SMS message. A pres- 
ently preferred, but certainly not limiting encryption al- 
gorithm is one based on RSA. 

[0040] Briefly, RSA is a public-key cryptosystem de- 
veloped at MIT in 1977 in an effort to aid in ensuring 
internet security. A cryptosystem may be considered to 
be an algorithm that can convert input data into some- 
thing unrecognizable (encryption), and convert the un- 
recognizable data back to its original form (decryption). 
To encrypt data, one enters the data ("plaintext") and an 
encryption key to the encryption portion of the algorithm. 
To decrypt the "ciphertext," a proper decryption key is 
used at the decryption portion of the algorithm. These 
keys are refen-ed to as a public key and a private key, 
respectively. For example, to send data from A to B, A 
looks-up or othenwise has knowledge of the public key 
of B, and then encrypts the data the using the public key 
of B. The public key however, will not decrypt the ci- 
phertext. In order for B to decrypt the received cipher- 
text, B must use B's private key If B wishes to respond 
to A using an encrypted response, B must encrypt the 
response using As public key 

[0041] In a public-key cryptosystem such as RSA it is 
important that a user's private key cannot be deter- 
mined. This is accomplished through the use of a one- 
way function. With a one-way function, it is straight-for- 
ward to compute a result given certain input values. 
However, it is extremely difficult, preferably nearly im- 
possible, to determine the original values if one starts 
with the result. The one-way function used in RSA is 
multiplication of prime numbers. In general, it is relative- 



10 

ly easy to multiply two large prime numbers, but for most 
very large primes, it is extremely time-consuming to fac- 
tor them. Public-key cryptography thus constructs a 
cryptosystem that uses two large prime numbers to form 
5 the private key, and the product of the prime numbers 
to form the public key. 

[0042] In accordance with an aspect of this invention 
a secret, private key (PrvtKey) 35A is stored in the net- 
work 32, such as at the network control center 33 or at 
10 the remote diagnostic center 38, along with a general 
public key (GPK) 35B of mobile stations associated with 
a specific service which, in this case, is the PPC service. 
The mobile station 1 0 stores the general public key Pub- 
Key is stored In the mobile station 10, such as in a \o- 
15 cation 24B of the memory 24. When the encrypted mes- 
sage arrives from the wireless network 32 It is decrypted 
by the data processor 18 of the mobile station 10 using 
the associated public key stored in the location 24B. On- 
ly in response to decrypting a valid request for PPC data 
does the mobile station 10 transmit the set or the sub- 
set of PPC data to the wireless network 32 (Step B of 
Fig. 4). The response could be encrypted by the mobile 
station 10, although this is not a requirement for most 
types of response, such as the PPC data response, as 
there is typically nothing secret or confidential in the re- 
sponse data, or it is othenivise unrecognizable by a third 
party 

[0043] In this technique it can be appreciated that only 
the general public key(s) need be stored in the mobile 
stations 10, while the secret or private key 35A is se- 
curely stored in a main server maintained by the wire- 
less service provider 32. In this manner the instruction 
set and/or data that is sent to the mobile station 10 is 
also secured, thereby maintaining the application struc- 
ture secret and preventing unauthorized third parties 
from attempting to use the application and the associ- 
ated parts of the system. 

[0044] Note should be made that when using this 
technique the mobile station 10 could store n separate 
public keys corresponding to a set of n different appli- 
cations. In this manner the mobile station 10 responds 
to a given application Initiated by the wireless network 
32 only if the triggering event, e.g., the receipt of a valid 
message and an optional data set, can be accurately 
decrypted using one of the n stored public keys. 
[0045] In other embodiments of this invention other 
than the RSA cryptosystem can be employed. 
[0046] Fig. 5 shows a system level diagram that in- 
cludes an over the air activation (OTA) system in accord- 
ance with an aspect of these teachings. In this system 
there is a sen^ice layer 60, a web server layer 62 and a 
client layer 64. The service layer 60 includes an OTA 
server running OTA software (SW) 66 that communi- 
cates with a global systems service data base 68. The 
web server layer 62 is populated with web servers 70, 
and the client layer 64 is populated with PCs and/or 
workstations, generally refenred to as terminals 72, that 
are located at, for example, research and development 



25 



30 



35 



40 



45 



50 



6 



11 



EP1 309 214 A1 



12 



Claims 

1 . A method for operating a mobile station (1 0). char- 
acterized by: 

5 

during the operation of the mobile station, de- 
termining and storing a set of performance-re- 
lated data (24A) in the mobile station; and 

10 responsive to an occurrence of a triggering 

event, transmitting the set or a sub-set of the 
perfomnance-related data to a computer (33A) 
for analysis. 

15 2. A method as in claim 1 , where the performance-re- 
lated data is stored in counters and registers. 

3. A method as In claim 1 or 2, wherein the perfomn- 
ance- related data is comprised of a count of 

20 dropped calls. 

4. A method as in claim 1 or 2, wherein the perfomn- 
ance- related data is comprised of an indication of 
a result of a mobile station self-test mode of opera- 

25 tion. 

5. A method as in any preceding claim, wherein the 
triggering event is comprised of a receipt by the mo- 
bile station of a message to transmit the set or sub- 

30 set of the performance-related data. 

6. A method as in any of claims 1 to 4, wherein the 
triggering event is comprised of a receipt by the mo- 
bile station of an input from a user of the mobile sta- 

35 tion. 

7. A method as in any of claims 1 to 4, wherein the 
triggering event is comprised of an expiration of a 
timer. 

40 

8. A method as in any of claims 1 to 4, wherein the 
triggering event is comprised of at least one of said 
performance-related data being equal to a thresh- 
old value. 

45 

9. A method as in any preceding claim, wherein the 
step of transmitting the set or a sub-set of the per- 
formance-related data comprises steps of: 



(R&D) facilities, customer support locations and point of 
sale (POS) locations. The temninals 72 communicate 
with the OTA sen/er 66 via the internet or some other 
networi^ through the web server layer 62. In accordance 
with these teachings the PPC data set Is obtained from 
the mobile station 10 using an encrypted PPC request 
message sent from the OTA server 66. The retrieved 
information can then be stored in the global data base 
68 and/or it can be provided to one or more of the ter- 
minals 72 at the client layer 64 for review and analysis. 
[0047] Fig. 6 shows a logic flow diagram of an exem- 
plary PPC retrieval method in accordance with these 
teachings. At Step A customer calls a help line to report 
a perceived problem with the customer's mobile station 
10. This call by the customer could as well be made 
through the internet 37, and need not be a voice call. At 
Steps B and C a dialogue is conducted with the custom- 
er concerning the assumed fault in the customer's mo- 
bile station 10 At Step D a trigger SMS message is sent 
to the customer's mobile station 10 to elicit the sending 
of the PPC data. All or part of the trigger SMS message 
could be encrypted, such as by using the RSA encryp- 
tion technique discussed above. At Step E a determina- 
tion is made if the PPC data will be transmitted by 
prompting the customer as to whether the PPC data 
should be transmitted. The sending of the PPC data 
could be free of charge to the customer, or a fee might 
be involved. If the customer elects not to transmit the 
PPC data, control retums to Step B to continue the dia- 
log with the customer. If the customer indicates that the 
PPC data is to be transmitted, control passes to Step F 
to transmit all or a sub-set of the PPC data from the mo- 
bile station 1 0, via the OTA SW66, and the data is stored 
into a PPC data base at the wireless networic 32. The 
PPC data base may be the global data base 68 shown 
in Fig. 5. At steps G and H the PPC data base is queried 
for the PPC data from the mobile station 10 and the data 
is analyzed. The results of the analyses can be passed 
back to the help line using a web tool at Step I for verbally 
informing the customer of the result, or the results could 
be sent to the customer over the internet 37 via the web 
server layer 62 of Fig. 5. If necessary, the web tool at 
Step I may directly query the PPC data base at Step J. 
[0048] The end result is an improvement in the diag- 
nosis of the customer's perceived mobile station fault, a 
reduction in cost for the network operator 32 and possi- 
bly also the manufecturer of the mobile station 10, and 
an improvement in customer satisfaction. 
[0049] While the invention has been particulariy 
shown and described with respect to prefen-ed embod- 
iments thereof, it wilt be understood by those skilled in 
the art that changes in fomn and details may be made 
therein without departing from the scope and spirit of the 
invention. 



receiving the transmitted set or sub-set of the 
performance-related data at a control center 
associated with a network service provider; and 

analyzing the data to determine an Indication 
of an occurrence of at least one of a fault in the 
mobile station, a fault In a system of the network 
sen/ice provider, or a no fault condition. 
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10. A method as in claim 9, and further comprising a 
step of mal<ing the indication available to a user of 
the mobile station. 

11. A method as in any of claims 1 to 8, wherein the 5 
step of transmitting the set or a sub-set of the per- 
formance-related data comprises steps of: 

receiving the transmitted set or sub-set of the 
performance-related data at a remote diagnos- io 
tic center; and 

analyzing the data to determine an indication 
of an occun-ence of at least one of a fault in the 
mobile station, a fault in a system of the network i5 
service provider, or a no fault condition. 

12. A method as in claim 11, and further comprising a 
step of making the indication available to a user of 
the mobile station. 20 

13. A method as in any preceding claim, wherein the 
analysis includes determining statistical information 
regarding a population of mobile stations. 



25 

14. A method as in any preceding claim, wherein the 
analysis includes determining whether an opera- 
tional fault has occurred and, if it has, determining 
whether the operational fault occurred in the mobile 
station or in a wireless network that sen/es the mo- 3o 
bile station. 

15. A method as in any of claims 1 to 8, wherein the 
step of transmitting the set or a sub-set of the per- 
formance-related data comprises steps of: 35 

receiving the transmitted set or sub-set of the 
performance-related data at a local computer 
that is coupled to the mobile station through a 
data interface; and 40 

analyzing the data to determine an indication 
of an occurrence of at least one of a fault in the 
mobile station, a fault in a system of the network 
service provider, or a no fault condition. 45 

16. A method as in claim 15, and further comprising a 
step of making the indication available to a user of 
the mobile station. 

50 

17. A method as in any preceding claim, wherein the 
triggering event is comprised of a receipt by the mo- 
bile station of an encrypted message to transmit the 
set or sub-set of the performance-related data, and 
further comprising decrypting the received mes- 55 
sage using an associated public key stored in the 
mobile station and transmitting the set or the sub- 
set of the performance-related data only in re- 



sponse to correctly decrypting the encrypted mes- 
sage. 

18. A method as in claim 17, wherein the public key 
stored in the mobile station is one of a set of public 
keys stored in the mobile station, wherein individual 
members of the set of public keys are associated 
with applications executable by the mobile station 
in cooperation with at least one of an encrypted 
command and an encrypted data set received from 
the wireless network that are decrypted by the mo- 
bile station using one of the set of public keys. 

19. A mobile station (10) comprising a wireless trans- 
ceiver (14,16) for conducting bidirectional commu- 
nications with a wireless network (32), said mobile 
station further comprising a memory (24) and a con- 
troller (18) coupled to said memory and to said 
transceiver, characterized by said controller being 
operable for determining, during the operation of 
said mobile station, a set of performance-related 
data and for storing said determined set of perform- 
ance-related data (24A) in said memory, said con- 
troller being responsive to an occurrence of a trig- 
gering event for transmitting said set or a subset of 
said performance-related data to a computer (33A) 
for analysis. 

20. A mobile station as in claim 19, wherein said per- 
formance-related data is stored in at least one of 
hardware counters and registers and memory loca- 
tions functioning as counters and as registers. 

21. A mobile station as in claim 19 or 20, wherein said 
performance-related data is comprised of at least 
one of a count of dropped calls and an indication of 
a result of a mobile station self-test mode of opera- 
tion. 

22. A mobile station as in any of claims 1 9 to 21 , where- 
in said triggering event is comprised of a receipt by 
said controller, via said transceiver, of a message 
to transmit said set or sub-set of said performance- 
related data. 

23. A mobile station as in any of claims 1 9 to 21 , where- 
in said triggering event is comprised of a receipt by 
said controller, via a user interface (20,22), of an 
input from a user of said mobile station. 

24. A mobile station as in any of claims 19 to 21 , where- 
in said triggering event is comprised of a receipt by 
said controller, via a data interface (28), of an input 
from a local computer (29) to which said mobile sta- 
tion is bidirectionally coupled. 

25. A mobile station as in any of claims 1 9 to 21 , where- 
in said triggering event is comprised of at least one 
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of an expiration of a timer and at least one of said 
performance-related data being equal to a thresh- 
old value. 

26. A mobile station as in any of claims 19 to 25, where- 5 
in said computer comprises a part of a control cent- 
er (33) associated with a network sen^ice provider . 
(32), and wherein said computer analyses said per- 
formance-related data to determine an indication of 

an occurrence of at least one of a ^ult in said mobile io 
station, a fault in a system of said network sen/ice 
provider, or a no fault condition. 

27. A mobile station as in claim 26, wherein said net- 
work service provider transmits said indication to i5 
said mobile station controller via said mobile station 
transceiver. 

28. A mobile station as In any of claims 1 9 to 25, where- 
in said computer comprises a part of a diagnostic 20 
center (38), and wherein said computer analyses 
said performance-related data to determine an in- 
dication of an occun-ence of at least one of a ^ult 

in said mobile station, a fauft in a system of said 
network service provider, or a no fault condition. 25 

29. A mobile station as in claim 28, wherein said diag- 
nostic center transmits said indication to said mo- 
bile station controller via said mobile station trans- 
ceiver. 30 

30. A mobile station as in claim 28 or 29, wherein said 
diagnostic center is bidirectionally coupled to a data 
communications network (36,37) for receiving said 
transmitted performance-related data therefrom, 35 
and for transmitting said indication thereto. 

31. A mobile station as in any of claims 28 to 30, where- 
in said diagnostic center is bidirectionally coupled 

to the internet (37) for receiving said transmitted 40 
performance-related data therefrom, and for trans- 
mitting said indication thereto. 

32. A mobile station as in any of claims 1 9 to 31 , where- 
in said analysis includes determining statistical in- 
formation regarding a population of mobile stations. 

33. ' A mobile station as in any of claims 1 9 to 32, where- 

in the triggering event is comprised of a receipt by 
the mobile station of an encrypted message to so 
transmit the set or sub-set of the performance-re- 
lated data, and said controller being responsive to 
the receipt of the message for decrypting the re- 
ceived message using an associated public key 
(24B) stored in the mobile station and for transmit- 55 
ting the set or the sub-set of the performance-relat- 
ed data only in response to conrectly decrypting the 
encrypted message. 



34. A mobile station as in any of claims 1 9 to 32. where- 
in the triggering.event is comprised of a receipt by 
the mobile station of an SMS message that is at 
least partially encrypted, said controller being re- 
sponsive to the receipt of the SMS message for de- 
crypting the received SMS message using an asso- 
ciated public key (24B) stored In the mobile station 
and for transmitting the set or the sub-set of the per- 
formance-related data using a reply SMS message 
only in response to correctly decrypting the encrypt- 
ed SMS message. 

35. A mobile station as in any of claims 1 9 to 34, where- 
in the public key stored in the mobile station is one 
of a set of public keys stored in the mobile station, 
wherein individual members of the set of public keys 
are associated with applications executable by the 
mobile station in cooperation with at least one of an 
encrypted command and an encrypted data set re- 
ceived from the wireless network, the encrypted 
command and data set being decrypted by the mo- 
bite station using the associated one of the set of 
public keys. 
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